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Abstract 

Product update is an operation on models introduced into epistemic logic 
in order to represent a broad class of informational events. If adding modal- 
ities representing product update to a language does not alter its expressive 
power then we say that the language is 'closed for product update' . The basic 



modal language is known to be closed for product update | Baltag et al., 1999 



Gerbrandy, 1999 1. We establish that monadic second order logic is closed 



for product update (Theorem|5]). Our technique is to pass via an intermediate 
language with what we call 'action nominals'. We obtain as corollaries that 
propositionally quantified modal logic is closed for product update, as is the 
modal /i-calculus. 



1 Preamble 



The semantic operation of product update was introduced into epistemic logic as 
a generalisation of relativisation. Where logics including relativisation operators 
can reason about public announcements, logics with 'action' product update op- 
erators enable us to reason about information change under a much broader class 
of informational events, allowing for arbitrary levels of uncertainty amongst the 
agents modelled. Adding action operators for product update into formal languages 
therefore opened the door for the logical analysis of social and formal protocols, 
including situations of deception and suspicion, and more generally any kind of 
uncertainty concerning what informational event is taking place. 



It has been established [Baltag et al, 1999 1 that adding such action operators 



does not increase the expressivity of the basic modal language, but does increase 
the expressivity of the language with common knowledge. A natural question when 
looking at a modal language is whether adding operators for product update in- 
creases the expressivity or not. We answer here three instances of that question, 
for very expressive modal languages, each of which has some sort of second-order 
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quantification, and so is not less expressive than the first-order correspondence lan- 
guage. These languages are those of: monadic second order logic (MSO), proposi- 
tionally quantified modal logic, and the modal /i-calculus. In each case we find that 
the logics are closed for product update, i.e. that adding action modalities does not 
increase the expressive power over the class of all (relational) models. Our method 
is first to prove that MSO is product closed, for which we introduce a novel tech- 
nique involving 'action nominals'; and then to use characterisation results of the 
other two languages as fragments of MSO to obtain the results concerning them as 
corollaries of the main result concerning MSO. 



2 Product closure 

We define in this section what we mean by 'closure for relativisation' and 'closure 
for product update'. These two 'closures' of a logid3 are best defined as in terms 
of two semantic operations on its models. 

If M. = (O, R, V) is a relational modeQ and A C Q, we write M\A for the 
relativisation of M to A, defined as (A, R\A, V\A), where R\A = Rn(AxA) and 
(V\A)(p) = V(p) n A. Then we say that a language C is closed for relativisation 
just when for any pair of formulas {ip, A} G C, there is a formula ip £ £ such 
that for any model M, {tpj M = M M \l A l M . To spell this definition out: for any 
formula ip, there is a formula ip that is true in model A4 just when <p 'will be' true in 
the relativised model A4\ {A} M . A natural interpretation of relativisation in modal 
models where the accessibility relation is taken to be epistemic is of an action 
of public announcement. Public announcements were introduced and discussed 
in this context in [Plaza, 19891 Gerbrandy and Groeneveld, 1997, Benthem, 2003]. 



To repeat the temporal idiom, ip can be thought of as saying that ip will be the case 
after announcement of A. 

To say that a language C is closed for relativisation is equivalent to saying 
that if we were to enrich £ with 'relativisation modalities' then we would obtain a 
language with exactly the same expressive power as L. That is, consider another 
language C\, obtained from C by addition of a family of modalities (\A) for each 
A € C, endowed with the following semantics: 

M,u\= (lil>)<p&M,ut=i/>mdM\m M ,u\=<p 

C is closed for relativisation iff C\ has precisely the same expressive power as C 

One can show by a 'compositional analysis' of its semantics that, for example, 
the basic modal language Cu is closed for relativisation. That is, one gives so- 
called 'reduction axioms', validities of the form (lip)O(ip) = Q((li/j)tp), for each 
connective O of the language. This technique, introduced for £□ in [Plaza, 1 989], 



'Or, as shall say, of a language, taking it for granted that we are talking about the logic of that 
language over the class of all relational models. 

2 So with n a non-empty set, R C Q x Q. and V : W -> 2 W . 
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shows not only that a language is closed for relativisation but, when Q is com- 
putable from O, that it is computably so closed. 

A similar technique can be employed to show that a language is closed for 
'product update'. Product update was developed in the context of epistemic logic 
in |Gerbrandy, 1999, Baltagef aZ., 1999 1. Semantically, it is a more complicated 
operation than relativisation. In order to define product update we need to define 
'event models', defined in terms of the language C An event model is a tuple 
(S,E,PRE), where S is a finite non-empty set of 'events', E C S x S is a 
relation over £ and PRE_ : £ — > C gives the 'precondition' formula for each 
'event'. Product update <g> is then a function that, given a model and an event 
model, returns a new model. It is defined as follows: 

({(oj,a) G £7 x A j M,lj \= Pre a }, 
{((w, a), (u/, a')) | uRuj' & aEa'}, 
{(p,{(w,a) | w G V(p)}) | p G PROP) 

For any event model A = (£, PRE), we could expand the language £ to a 
language £ Q by adding a collection of operators (a) for each event a G S, with 
the following semantics: 

.A/1, a; 1= 44* A1,u; 1= Pre a and M ® A, (u), a) \= (p, 

We say that a language £ is closed for product update just if any language £ a 
formed in this way has the same expressive power as C. Equivalently (for all 
languages C that we consider), C is closed for product update just if for every ip G 
C and each event a there is some pi G C such that in any model, [(a)V>l = l<pj- 



3 MSO 

We now define the first logic that we will consider: propositionally quantified 
modal logic with a global modality. The language C^u is given by the follow- 
ing Backus-Naur form: 

ip ::= p \ -up | ip A ip | dip | 3p.(p \ U (p 

We assume, throughout the paper, standard abbreviations like V, D, V. If M. = 
(Q,R,V), then 'M\p i-> X]' denotes the model (Sl,R,V') t where V'(p) = X 
and for all q ^ p, V'(q) = V(q). The semantics of Cs u we as follows, where 
M = (O, R, V) is a model. 



M,U! \= p 


df 


u G 


M,lu 1= -><p 


df 
<^ 


.A4, w Y- ip 


M,uj \= p A tp 


df 


M,u> \= p and .M , ui \= ip 


M,oj t= Dip 


df 


Vw (ljRlu lj' \= ip) 


M,uj 1= Bp.ip 


df 


3X C n : M[p^l], w N 99 


M,u)\=U(p 


df 


Vu/ G 0, u/ 1= </> 
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The same language but without the universal modality U was first studied in [Fin e, 1970| , 
and we will consider it below in section [5] The language £g u is known to be a 
translation into modal notation of monadic second-order logic Cmso- That is: 
for every £MSO-f orm ula ip{x) with one free variable ("£MSO-type") there is a 
£3, [/-formula true at those points of which tp(x) is true, and vice-versa. This is the 
recursive definition of Cmso '■ 

(p ::= Px I xRy \ —>ip | 92 A 92 | 3xtp \ 3Pip 

The semantics of the first-order part of Cmso are standard, and the prepositional 
quantifier 3P has the natural interpretation, as quantifying unrestrictedly over sub- 
sets of the domain. The only slightly tricky clause of the translation between 
CmSO and C^u is the following: 

TR(3xip(x)) = 3p.(Ep A Vq.(U{q D p) D U(p D q)) A ip(p)). 

This equivalence means that we prove about the expressivity of 3,U can equiva- 
lent^ be read as being about £A/so-tyP es > an d we can refer to Cs } u as "MSO". 



4 MSO is product closed 

To warm up we will remark that £3,1/ is closed under relativisation. In order to do 
this we want a 'reduction axiom' for the quantifier 3p. The following Fact states 
such a reduction axiom: 

Fact 1. Ifp does not occur in A, then: 

N (\A)3p.tp = 3p.(U(p DA) A (\A)<p) 

Fact[TJplays the central part in the proof of Proposition |2] 

Proposition 2. C^u is computably closed for relativisation. 

(Proposition [2] follows from Fact [Q and in any case would be an immediate 
corollary of Theorem [5] below.) 

In the rest of this section we will work towards Theorem [5l which states that 
Cijj is also (computably) closed for product update. Fix some event model (£, E, PRE) 
with S = {ao, • • • , a n _i}. We will show that the language £a.[/ >Q obtained by 
adding event modalities (a) for each a € S has precisely the same expressive 
power as the original language C^jj. 

In order to show that Cs t u is closed for relativisation we were able to give a 
reduction axiom for the quantifier 3p. The case for product update is a little bit 
more subtle. We will give a reduction axiom for the quantifier 3p, but we do not 
see how to do this directly in the language Cbu- Therefore we take a detour via 
some additional rather artificial vocabulary that allows expressing a subset of the 
product space in terms of a sequence of subsets of the initial model. 
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This new vocabulary consists of miliary modalities jo, ... , j n . Intuitively speak- 
ing, these action nominals will say, in the model M. x A, that action a, has just 
occurred. We call these jj's 'action nominals'. So the language C a j is formed 
from the language C a by including the action nominals, but only when they oc- 
cur under the scope of an action modality (a). To formally specify the language 
£-3,u,a,j, we consider first the set of sentences S^^aj, f° r which we cannot for- 
mulate a semantics, and therefore do not use the word 'language'. 

(p ::= p | ji | -up | cp A ip \ Ucp \ 3p.p \ U <p \ (a)<p. 

The problem in giving a semantics for S^^aj is precisely that action nominals can 
occur outside of the scope of action modalities, in which case we have no way to 
evaluate themU So we define the language C^jj.aj as follows, where can take 
values in S^^u ta f. 

ip ::= p | -up | ip A p | dip | 3p.p \ Up \ (a)ip. 

We have said what the intuitive meaning of the action nominals is. Formally, the 
semantics of action nominals are as follows: 

M (8) A, (uj, a) \= ji a = cti 

Since action nominals can only occur under the scope of at least one action op- 
erator, this semantic clause is sufficient. Notice that action nominals have simple 
reduction axioms: 

Remark 3. The following equivalences hold: 

1= (cti)ji = Pre a% 

1= {oci)j k = l. for i^k. 

More importantly, it is now possible to write down a reduction axiom for the 
quantifier 3p: 

Lemma 4. If none ofpo, . . . , p n -\ occur in p or any Pre ai , then: 

N (a)3p.p = 3 Po . . . 3pn-i-(/\ U(p { D Pre a J A (a)p(\J ( Pi A ji))) 

Proof. We can prove this equivalence directly by the following string of equiva- 
lences: 

M,u> (= (a)3p.p(p) 

iff 

M ® A, (uj, a) \= 3p.tp(p) 

3 One natural option might be to say that in general M,u t= ji holds when there is some model 
M' with a point u' such that (M 1 ® A, (lu' , is isomorphic to (M, uj), but we have no need for 
such an option here. 
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iff 

3X C {(w',a') |M,oj'N Pre a /}, .M ® .A[p h- X], (u, a) N p(p) 

iff 

3X C [J({a/ € ft I w' N Pre a J x { ai }) : M® A]p>-> X\,(u,a) t= p(p) 

iff 

3X G {a/ G O [ u/ N PreaJ, • • ■ G {a/ G | u/ N Pre Qn _ 1 } : 

M®A\p*->\JXiX { ai }], (u, a) N p(p) 

iff 

3Xo G {a;' G | a/ t= Pre ao }, . . . ,X„_i G G | <J N Pre otn _ 1 } : 
M<g>A\po h-> Xj x {aj, . . . ,p„_i ^ X n _i x (w,a) N y{\J Pi) 

(where po, • • • >Pn-i are distinct and do not occur in or any Pre ai ), iff 

3X G {a/ G Q | a/ N Pre ao }, . . . ,X n _i G {a/ G | u/ N Pre Qn _ 1 } : 

Al <g) .4[p Xj x £,..., p n _i ^X n _i x E],(w,a) t= y{\J {pi Aji)) 

i&n 

iff 

3X G {a/ G j J 1= Pre ao }, . . . ,X n _i G {u/ G ft \ J 1= Pre^^J : 
M\p H- Xj, . . . ,p n _i h-> X n _i],a; 1= (a)y( y (Pi A j*)) 

iff 

3X ,...,X n _! CHiM.wN /\ I7(pi D Pre ai ) A (a)<p(\/ ( Pi A ji)) 

iff 

A4, w, t= 3p , . . . , 3p n _i.(/\ [/ ^ d Pre a J A (a}(p(\J ( Pi A #))) 

□ 

These reduction axioms (from Remark [3] and Lemma |4]) are what we use to 
establish the product closure of C^\j. 



Theorem 5. C^u is computably closea 1 for product update. I.e.: 

Va G £,VV> G C 3tU ,3x G £ 3>{ / : N x = (a)V>, 
where \ ' s effectively computable from ip and (£, a). 

Theorem [5] follows from Lemma [6] below, which is phrased in terms of the set 
of sentences <Sg t/j, defined recursively as: 

f ::= P I ji I "'V 9 I V 3 A V I I I U ip 

It is in terms of <Sg j/j, which clearly contains £3^, that we are able to prove a re- 
duction lemma, Lemma[6]below. Since S^ uj clearly contains C-^^j, then Theorem 
[5] is an immediate corollary of Lemma [6) 

Lemma 6. 

Proof. We would like to prove this by induction on by using our reduction 
axioms, and using the following inductive hypothesis, where 7 is less complex 
than ip: 

3(5 G ^3,u,j '■ M = (a) 7 (1) 

First we need an appropriate notion of complexity: since at the new case to be 
treated at the inductive stage, the prepositional quantifier case, the reduction axion 
increases the complexity of the formula, by the standard definition of complexity, 
we suppose we have a definition according to which formulas with greater quan- 
tifier depth have greater complexity, and that within that stratification the standard 
notion of formula complexity applies. Let e(ip) be the number of prepositional 
existential quantifiers 3 in ifi. 

Notice that we can immediately prove £T|) for the case when e(ip) = 0, for then 
if) G £>u,j> so tne new cases to be treated are just (a) ip := ji with a = a>i and (b) 
if) := ji with a ^ Ui. Here we use the 'reduction axioms' from Remark ??: for 
(a), t= (a)ji = T, and for (b) 1= (a)ji = 1. 

Therefore it will suffice, to prove the Lemma, to suppose that: 

© holds for e(ifi) < k (2) 

holds, and then to show that (Q} holds for e(ip) = k(k G N + ). 

Again, the 'old' cases are known, so we go straight to the new case: 

Let if) := 3p. 7 (p). Here we choose some go, ... , q n -i not occurring in either 

7 or any of the PRE^s, and letting 7' = "f(\f i&n (qi A ji)), define cp as follows: 

if := 3qb---3g„_i.(/\ Ufa D Pre ai ) A (0)7). 
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Then by Lemma [4J 1= ip = (a)ip. Furthermore, notice that 7' G $3,u,j-> and 
that £(7') = e(tp) — 1 < e(V0- So we can invoke our inductive hypothesis ©, 
establishing that there exists 5 G £3,^/ such that: 

N 5 = <a)Y. (3) 

It immediately follows that 1= 6> = 92, where: 

:= 3g . . . 3g n _i.(/\ Ufa D Pre a% ) A 5) 

Then since G £3,1/ we are done. □ 



5 A corollary for £3 

The language £3 is the language £3^ without the global modality U. The ab- 
sence of a global modality means that £3 is a 'local' language: as observed in 
[Benthem, 1983B , £3 is invariant under generated submodels. flCate, 20061 shows 



further that it is a proper fragment of the generated-submodel-invariant sublan- 
guage of £3,1/ and indeed establishes a second-order analogue of the van Benthem- 
Rosen theorem, characterising the expressivity of £3 as a fragment of MSO. We 
need some more definitions in order to formulate the characterisation given in 



flCate, 20061 of £3 as a fragment of £3^: Firstly, for k G N, and any point oj 
in the domain of the model M., we denote by the submodel of M. gener- 
ated from going at most k steps along R from oj. Let K(w) denote the class of 
pointed models defined by p, i.e. such that for any pointeqj model (Ai,oj), we 
have (A4, oj) G K 43- j\4,oj 1= ip. We say that ip has degree k (for k G N) when 
for all pointed models (M,oj), (M,oj) G K(</?) <3> (M^,oj) G K(cp). If there is 
some k G N such that ip has degree k, then let deg(<p) denote the least such k, and 
00 otherwise. Then the following theorem characterises £3 as a fragment of £3^: 

Theorem 7 ( flCate, 2006] Theorem 6]). A formula ip G £3^ is equivalent to a 
formula of £3 just ifdeg((p) ^ 00 

We now want to show that having finite degree is a property that is preserved 
by adding action modalities: 

Lemma 8. If <p and all of PRE ao , . . . , PRE an have finite degree then {a)p has 
finite degree. 

Proof. Notice that 

for any m < k then if <p has degree m, (p also has degree k. (4) 

Let k* = max({deg(PRE ao ), ... , deg{PRE an )} + deg(<p). Then © is used to 
show that 

(M ® A& 9 ^ is a submodel of (M k * ® A), 
which is in turn used to prove that deg({a)(p) < k*. □ 



A 'pointed model' is a model (fi, R, V) together with a point u£fi. 
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Then as a corollary of Theorem[5]we also obtain the closure of the proposition- 
ally quantified modal language £3: 

Corollary 9. £3 is closed for product update. I.e.: 

Ma € £,W> £ £a,3x £ £3 : 1= x = (a)^ 

Proof. Take 99 G £3 and consider (a)y; since £3 C £3 j/, then by Theorem [5] 
there is a formula rp' £ £3,(7 that is equivalent to Since 99 £ £3, we know 

that tp has finite degree, and then, by Lemma [8] that {a)(p also has finite degree. 
Therefore, since ip' and (a)tp are equivalent, ip' has finite degree, and therefore by 
Theorem |7] is equivalent to some ip £ £3. □ 



6 A corollary for £^ 

In this section we observe that, similarly, the relativisation closure of the modal 
fixpoint language £ M is a corollary of our Theorem [5] The closure of £ M is already 



obtained in [Benthem and Ikegami, 2008]. The proof of those authors is more di 



rect, but our proof, just as for £3 in the previous section, is very quick because it 
again uses a semantic characterisation result. £ M is defined as follows: 

tp ::= p I -up I tp A tp I dtp I vp.tp, 

where crucially in vp.tp, ip must be positive in p (i.e. all occurrences of p must be 
under the scope of an even number of negations -1). The new semantic clause for 
v is as follows: 

{up.tpl = \J{X C ft [ £ X,M[p 1 — y X],oj (= tp} 

The v operator expresses greatest fixpoints^ It is easy to see that £^ is a strict 
fragment of £3,(7, since we can define vp.tp as 

3p(p A U(p D tp)). 

Theorem [10] below is a more remarkable result, precisely characterising £ M in 
terms of £3^ is proved in [Janin a nd Walukiewicz, 1996] . We say that a modal 
formula tp is bisimulation-invariant just if for any pointed models (M.,u) and 
(M', to') that are bisimilafl M, uj \= tp <=> M', J 1= tp. 

Theorem 10. A formula tp £ £3^ is equivalent to an C^-formula iff it is bisimulation- 
invariant. 



5 More specifically: [i/p.y;(p)] is the greatest fixpoint of the function F v : 2 n — > 2 n defined by 
F V (X) = itp(p)lM[p^x]- The requirement that tp be positive inp ensures that F v is monotone and 
therefore has, as a consequence of the Knaster-Tarski theorem, a greatest fixpoint. 

6 For a definition of the fundamental modal logic notion of bisimulation, see e.g. 
IBlac kburnef aZ.,2001| . 
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Proof. Theorem[TO]follows immediately from [Janin andW alukie wicz, 1996 
orem 11], given that formulas are bisimulation-invariant. 



The- 
□ 



That elegant result is what leads us to see that is also closed for product 
update. We just need one additional lemma, which says that adding product-update 
modalities does not break bisimulation-invariance: 

Lemma 11. If ip and all of PRE ai , . . . , PRE an are bisimulation-invariant then 
(ct)(p is bisimulation-invariant. 

Proof. Take any bisimilar models M. and M! ', and a point u and u' in the do- 
main of each. It will suffice to show that M.,oj \= ip iff M! ' ,oj' 1= p. Let Z 
be a bisimulation for those models, with ujZoj' . Using the fact that the PRE ai 's 
are bisimulation-invariant, the relation Y defined as follows can be shown to be a 
bisimulation between M. <8> A and A4' <g> A: 

{a,0)Y(t,i) & sZt&p = -f. 

Then since ip is also bisimulation-invariant, we know that M. ® A, (ui, a) 1= tp iff 
A4' <S> A, (co r , a) 1= <p, which is equivalent to what we set out to establish. □ 

Corollary 12. is closed for product update, i.e.: 

Proof. The proof is analogous to that of Corollary [9] □ 

7 Conclusion 

We have shown that monadic second-order logic is closed for product update. We 
did this using 'action nominals', which served as a sort of 'memory' in the reduc- 
tion axiom process. This book-keeping allowed us to keep track of which action 
had occurred, and therefore to 'talk about' subsets of the product model in terms 
of sequences of subsets of the initial model. Although we pass via a language with 
action nominals, Lemma [6] does specify a method that, given a formula ip G £g u 
yields a concrete formula x G that is equivalent to (a)ip. 

We obtained as corollaries the facts that propositionally quantified modal logic, 
and the modal fixpoint calculus, are closed for product update. This was in each 
case achieved by using a semantic characterisation result. The non-constructive 
nature of our proofs of these corollaries, unlike that of Lemma [6l mean that they 
do not establish that either propositionally quantified modal logic or the modal 
fixpoint calculus are computable closed. 

Acknowledgements 

Participants in the ILLC's Dynamic Logic seminar series provided helpful com- 
ments, especially Johan van Benthem, who suggested Corollary [T2l 



10 



References 



[Baltag et al, 1999] Alexandru Baltag, Lawrence S. Moss, and Slawomir Solecki. 
The logic of public announcements, common knowledge and private suspicions. 
Technical Report SEN-R9922, Centrum voor Wiskunde en Informatica, 1999. 

[Benthem and Ikegami, 2008] Johan van Benthem and Daisuke Ikegami. Modal 
fixed-point logic and changing models. In A. Avron, N. Dershowitz, and A. Ra- 
binovich, editors, Pillars of Computer Science, volume 4800 of Lecture Notes 
in Computer Science, pages 146-165. Springer, 2008. 

[Benthem, 1983] Johan van Benthem. Modal Logic and Classical Logic. Bib- 
liopolis, 1983. 

[Benthem, 2003] Johan van Benthem. One is a lonely number. ILLC Prepublica- 
tion, PP-2003(07), 2003. 

[Blackburn et al, 2001] Patrick Blackburn, Maarten de Rijke, and Yde Venema. 
Modal Logic. Cambridge University Press, Cambridge, UK, 2001. 

[Cate, 2006] Balder ten Cate. Expressivity of second-order propositional modal 
logic. Journal of Philosophical Logic, 35:209-223, 2006. 

[Fine, 1970] Kit Fine. Propositional quantifiers in modal logic. Theoria, 36:336- 
346, 1970. 

[Gerbrandy and Groeneveld, 1997] Jelle Gerbrandy and Willem Groeneveld. Rea- 
soning about information change. Journal of Logic, Language, and Information, 
6:147-169, 1997. 

[Gerbrandy, 1999] Jelle Gerbrandy. Bisimulations on Planet Kripke. PhD thesis, 
ILLC, Amsterdam, 1999. 

[Janin and Walukiewicz, 1996] David Janin and Igor Walukiewicz. On the ex- 
pressive completeness of the propositional mu-calculus with respect to monadic 
second order logic. In CONCUR '96: Proceedings of the 7th International Con- 
ference on Concurrency Theory, pages 263-277, London, UK, 1996. Springer- 
Verlag. 

[Plaza, 1989] Jan A. Plaza. Logics of public communications. In M. L. Emrich, 
M. S. Pfeifer, M. Hadzikadic, and Z. W. Ras, editors, Proceedings of the 4th 
International Symposium on Methodologies for Intelligent Systems, pages 201- 
216, 1989. 



11 



